Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 89d256bb authored by Alexei Starovoitov's avatar Alexei Starovoitov Committed by David S. Miller
Browse files

bpf: disallow bpf tc programs access current->pid,uid 



Accessing current->pid/uid from cls_bpf may lead to misleading results and
should not be used when TC classifiers need accurate information about pid/uid.

Signed-off-by: default avatarAlexei Starovoitov <ast@plumgrid.com>
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
parent ea6bb99e

net/core/filter.c

+0 −6
Original line number Diff line number Diff line
@@ -1461,12 +1461,6 @@ tc_cls_act_func_proto(enum bpf_func_id func_id) 
		return &bpf_l4_csum_replace_proto;

	case BPF_FUNC_clone_redirect:

		return &bpf_clone_redirect_proto;

	case BPF_FUNC_get_current_pid_tgid:

		return &bpf_get_current_pid_tgid_proto;

	case BPF_FUNC_get_current_uid_gid:

		return &bpf_get_current_uid_gid_proto;

	case BPF_FUNC_get_current_comm:

		return &bpf_get_current_comm_proto;

	default:

		return sk_filter_func_proto(func_id);

	}